Remote InfoSec & Cybersecurity Engineer

Capital District Physicians Health Plan Inc; Town of De Witt (NY); On-site; USD 70,000 - 140,000; Full time

Job summary

CDPHP is seeking an Information Security & Cybersecurity Engineer to develop and maintain the organization’s security program across operations, governance, and IAM. You will provide risk management, security consulting, and support for management and lines of business.

The role spans security operations, governance, risk, compliance, and identity and access management, with on-call rotation and a focus on protecting information assets.

Qualifications

• Bachelor's degree in CS/IT or 6 years related experience in lieu of degree
• Hands-on OS experience: mainframe, Windows, UNIX/Linux
• Knowledge of encryption, PKI and network/security controls
• Familiarity with vulnerability scanners and pen-testing tools
• Experience with SIEM platforms and security tooling

Responsibilities

• Design, implement, and operate org-wide security infrastructure
• Support security technologies and manage risk across platforms
• Maintain information security framework and drive maturity
• Respond to security requests within SLAs and document risk actions
• Assess supplier risk and perform audits and compliance
• Coordinate 24/7 on-call coverage and incident response readiness
• Integrate security controls into new/existing systems

Skills

Security operations

Governance & Risk

Identity & Access Management

Encryption

PKI

Network security

AD / LDAP auth

Endpoint security

Vulnerability assessment

Penetration testing tools

SIEM

OWASP

Verbal communication

Written communication

Education

Bachelor's degree in CS/IT or related field

Tools

Palo Alto Networks

Imperva

McAfee

Nessus

Metasploit

Burp Suite

ArcSight

Splunk

QRadar

Job description

CDPHP is seeking an Information Security & Cybersecurity Engineer to develop and maintain the organization’s security program across operations, governance, and IAM. You will provide risk management, security consulting, and support for management and lines of business.

The role spans security operations, governance, risk, compliance, and identity and access management, with on-call rotation and a focus on protecting information assets.